Malicious code in datascite (npm)

The package datascite was found to contain malicious code...